How to manually change date and time on a NetWitness Appliance
Resolution
In the event an NTP server is not available, to manually change the system time, follow these steps:
- SSH to the appliance
- Use the "date" command with the below syntax to change the time and date:
date [MMDDhhmm]
where:
MM: Month
DD: Day
hh: Hour
mm: minutes
Example, to change the date and time to Sept 21, 2024 at 5:48pm UTC:
date 09211748
Mon Sep 21 17:48:00 UTC 2024
- Use the date command to confirm changes has been done correctly:
date
Mon Sep 21 17:48:19 UTC 2024
Notes
This command may be used as an interim workaround until ntp can be configured. Using a properly configured NTP service across all Netwitness servers is still considered the Netwitness best practice.
Product Details
NetWitness Product Set: NetWitness Logs and Packets
NetWitness Product/Service Type: All Hosts
NetWitness Version/Condition: 11.x , 12.x
Platform: CentOS, AlmaLinux
Summary
This article describes how to manually change the time on the SA
Approval Reviewer Queue
Technical approval queue